Privacy Policy

Effective date: 3rd January, 2026  |  Company: Mayaverse Labs (OPC) Private Limited

1) Scope

This Privacy Policy explains how Mayaverse Labs (“we”, “us”) collects, uses, shares, and protects information when you use our websites, Shopify apps (including “Profit Cockpit”), and mobile apps (Android/iOS).

2) Information we collect

• Account & contact information: name, email, and communications when you contact support or create an account (if applicable).
• Shopify store information (for Shopify apps): store domain and store-related data your store provides through Shopify APIs, which may include orders, products, refunds, and related commerce records depending on the app’s features and the permissions you grant.
• Connected platform data (optional integrations): if you connect third-party services (e.g., Meta/Facebook, Google Ads), we may access data such as ad account identifiers, campaign metadata, and spend/performance metrics as permitted by the scopes you authorize.
• Usage & diagnostics: log data (e.g., timestamps, feature usage, error logs), device/browser info, and approximate location derived from IP for security and troubleshooting.
• Cookies: essential cookies for site functionality and security. (If you add marketing analytics later, update this policy accordingly.)

3) How we use information

• Provide, operate, and maintain our products and integrations
• Authenticate users and connected services (OAuth) and keep sessions secure
• Process requests, provide support, and communicate service-related updates
• Improve reliability, performance, and user experience
• Prevent abuse, fraud, and security incidents
• Comply with legal obligations

4) OAuth and connected accounts (Meta / Google / others)

If you connect a third-party account (such as Meta or Google), you grant us permission to access data according to the scopes shown during authorization. We store access tokens and related identifiers only as necessary to maintain the connection and provide the functionality you enabled.

5) How we share information

We do not sell personal information. We may share limited data only in these cases:

• Service providers: hosting, email delivery, monitoring, analytics (if enabled), and other vendors that process data on our behalf under contractual confidentiality.
• Legal requirements: to comply with law, regulation, or valid legal process.
• Security: to protect the rights, safety, and security of users, our products, and the public.
• Business changes: in connection with a merger, acquisition, or asset sale, with appropriate safeguards.

6) Data retention

We retain information only as long as needed to provide the service, meet contractual obligations, resolve disputes, enforce our agreements, and maintain security. Retention periods may vary by data type.

7) Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is 100% secure, but we work to prevent unauthorized access and misuse.

8) Your choices and rights

• Access / correction: you may request access to or correction of certain information we hold about you.
• Deletion: you may request deletion of information, subject to limited legal/security retention requirements.
• Disconnect integrations: you can revoke permissions by disconnecting the integration in the product or via the third-party provider settings.

9) Children’s privacy

Our products are not directed to children under 13 (or the age required by local law). We do not knowingly collect personal information from children.

10) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new effective date.

11) Contact

Privacy questions or requests: support@mayaverselabs.com